CVE-2026-20311
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Severity
MEDIUM
CVSS score
6.3
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-08-05 17:16:51.893000
Last modified
2026-10-23 21:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-20311",
"sourceIdentifier": "[email protected]",
"published": "2026-08-05T17:16:51.893",
"lastModified": "2026-10-23T21:10:00.157",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco IOS XE Software podría permitir a un atacante remoto autenticado con privilegios bajos causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un manejo de errores insuficiente en la interfaz de gestión basada en web. Un atacante podría explotar esta vulnerabilidad autenticándose con un certificado malformado. Un exploit exitoso podría permitir al atacante causar que el dispositivo afectado se recargue, lo que resultaría en una condición de DoS."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IOS XE Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "17.3.1",
"status": "affected"
},
{
"version": "17.3.1a",
"status": "affected"
},
{
"version": "17.3.2a",
"status": "affected"
},
{
"version": "17.3.1w",
"status": "affected"
},
{
"version": "17.3.2",
"status": "affected"
},
{
"version": "17.4.1",
"status": "affected"
},
{
"version": "17.4.1a",
"status": "affected"
},
{
"version": "17.3.1x",
"status": "affected"
},
{
"version": "17.3.3",
"status": "affected"
},
{
"version": "17.5.1",
"status": "affected"
},
{
"version": "17.4.1b",
"status": "affected"
},
{
"version": "17.3.1z",
"status": "affected"
},
{
"version": "17.4.2",
"status": "affected"
},
{
"version": "17.3.3a",
"status": "affected"
},
{
"version": "17.3.5",
"status": "affected"
},
{
"version": "17.3.4",
"status": "affected"
},
{
"version": "17.5.1a",
"status": "affected"
},
{
"version": "17.6.1",
"status": "affected"
},
{
"version": "17.3.4a",
"status": "affected"
},
{
"version": "17.6.1a",
"status": "affected"
},
{
"version": "17.7.1",
"status": "affected"
},
{
"version": "17.6.1x",
"status": "affected"
},
{
"version": "17.6.2",
"status": "affected"
},
{
"version": "17.3.4c",
"status": "affected"
},
{
"version": "17.4.2a",
"status": "affected"
},
{
"version": "17.3.4b",
"status": "affected"
},
{
"version": "17.7.1a",
"status": "affected"
},
{
"version": "17.8.1a",
"status": "affected"
},
{
"version": "17.6.3a",
"status": "affected"
},
{
"version": "17.6.3",
"status": "affected"
},
{
"version": "17.7.2",
"status": "affected"
},
{
"version": "17.7.1b",
"status": "affected"
},
{
"version": "17.9.1w",
"status": "affected"
},
{
"version": "17.3.5a",
"status": "affected"
},
{
"version": "17.6.1z",
"status": "affected"
},
{
"version": "17.8.1",
"status": "affected"
},
{
"version": "17.9.1",
"status": "affected"
},
{
"version": "17.6.4",
"status": "affected"
},
{
"version": "17.3.5b",
"status": "affected"
},
{
"version": "17.9.1a",
"status": "affected"
},
{
"version": "17.3.6",
"status": "affected"
},
{
"version": "17.10.1",
"status": "affected"
},
{
"version": "17.6.1z1",
"status": "affected"
},
{
"version": "17.10.1a",
"status": "affected"
},
{
"version": "17.9.2",
"status": "affected"
},
{
"version": "17.6.5",
"status": "affected"
},
{
"version": "17.9.1x",
"status": "affected"
},
{
"version": "17.9.1y",
"status": "affected"
},
{
"version": "17.3.7",
"status": "affected"
},
{
"version": "17.9.2a",
"status": "affected"
},
{
"version": "17.9.3",
"status": "affected"
},
{
"version": "17.11.1",
"status": "affected"
},
{
"version": "17.10.1b",
"status": "affected"
},
{
"version": "17.6.6",
"status": "affected"
},
{
"version": "17.9.1x1",
"status": "affected"
},
{
"version": "17.11.1a",
"status": "affected"
},
{
"version": "17.9.3a",
"status": "affected"
},
{
"version": "17.12.1",
"status": "affected"
},
{
"version": "17.3.8",
"status": "affected"
},
{
"version": "17.9.4",
"status": "affected"
},
{
"version": "17.12.1w",
"status": "affected"
},
{
"version": "17.9.1y1",
"status": "affected"
},
{
"version": "17.12.1a",
"status": "affected"
},
{
"version": "17.9.5",
"status": "affected"
},
{
"version": "17.13.1",
"status": "affected"
},
{
"version": "17.12.1x",
"status": "affected"
},
{
"version": "17.12.2",
"status": "affected"
},
{
"version": "17.14.1",
"status": "affected"
},
{
"version": "17.9.4a",
"status": "affected"
},
{
"version": "17.3.8a",
"status": "affected"
},
{
"version": "17.6.6a",
"status": "affected"
},
{
"version": "17.6.5a",
"status": "affected"
},
{
"version": "17.6.7",
"status": "affected"
},
{
"version": "17.15.1",
"status": "affected"
},
{
"version": "17.13.1a",
"status": "affected"
},
{
"version": "17.12.2a",
"status": "affected"
},
{
"version": "17.12.3",
"status": "affected"
},
{
"version": "17.12.1y",
"status": "affected"
},
{
"version": "17.12.1z",
"status": "affected"
},
{
"version": "17.9.5a",
"status": "affected"
},
{
"version": "17.14.1a",
"status": "affected"
},
{
"version": "17.9.5b",
"status": "affected"
},
{
"version": "17.6.8",
"status": "affected"
},
{
"version": "17.12.4",
"status": "affected"
},
{
"version": "17.9.6",
"status": "affected"
},
{
"version": "17.17.1",
"status": "affected"
},
{
"version": "17.16.1",
"status": "affected"
},
{
"version": "17.15.1w",
"status": "affected"
},
{
"version": "17.12.3a",
"status": "affected"
},
{
"version": "17.9.5c",
"status": "affected"
},
{
"version": "17.15.1a",
"status": "affected"
},
{
"version": "17.12.1z1",
"status": "affected"
},
{
"version": "17.15.2",
"status": "affected"
},
{
"version": "17.15.1b",
"status": "affected"
},
{
"version": "17.9.5d",
"status": "affected"
},
{
"version": "17.15.1x",
"status": "affected"
},
{
"version": "17.9.6a",
"status": "affected"
},
{
"version": "17.12.1z2",
"status": "affected"
},
{
"version": "17.6.8a",
"status": "affected"
},
{
"version": "17.16.1a",
"status": "affected"
},
{
"version": "17.15.3",
"status": "affected"
},
{
"version": "17.9.7",
"status": "affected"
},
{
"version": "17.12.5",
"status": "affected"
},
{
"version": "17.15.1y",
"status": "affected"
},
{
"version": "17.9.5e",
"status": "affected"
},
{
"version": "17.12.4a",
"status": "affected"
},
{
"version": "17.15.2a",
"status": "affected"
},
{
"version": "17.15.2c",
"status": "affected"
},
{
"version": "17.15.2b",
"status": "affected"
},
{
"version": "17.12.1z3",
"status": "affected"
},
{
"version": "17.9.5f",
"status": "affected"
},
{
"version": "17.12.4b",
"status": "affected"
},
{
"version": "17.12.5a",
"status": "affected"
},
{
"version": "17.18.1",
"status": "affected"
},
{
"version": "17.12.6",
"status": "affected"
},
{
"version": "17.12.1z4",
"status": "affected"
},
{
"version": "17.9.8",
"status": "affected"
},
{
"version": "17.9.7a",
"status": "affected"
},
{
"version": "17.15.3a",
"status": "affected"
},
{
"version": "17.15.4",
"status": "affected"
},
{
"version": "17.12.5b",
"status": "affected"
},
{
"version": "17.15.3b",
"status": "affected"
},
{
"version": "17.18.1z",
"status": "affected"
},
{
"version": "17.9.7b",
"status": "affected"
},
{
"version": "17.12.5c",
"status": "affected"
},
{
"version": "26.1.1",
"status": "affected"
},
{
"version": "17.18.1a",
"status": "affected"
},
{
"version": "17.15.4a",
"status": "affected"
},
{
"version": "17.18.2",
"status": "affected"
},
{
"version": "17.18.1w",
"status": "affected"
},
{
"version": "17.15.4b",
"status": "affected"
},
{
"version": "17.12.6a",
"status": "affected"
},
{
"version": "17.12.7",
"status": "affected"
},
{
"version": "17.15.4c",
"status": "affected"
},
{
"version": "17.9.9",
"status": "affected"
},
{
"version": "17.12.5d",
"status": "affected"
},
{
"version": "17.15.4s1",
"status": "affected"
},
{
"version": "17.15.5",
"status": "affected"
},
{
"version": "17.12.1z5",
"status": "affected"
},
{
"version": "17.18.1x",
"status": "affected"
},
{
"version": "17.12.1z6",
"status": "affected"
},
{
"version": "17.15.4d",
"status": "affected"
},
{
"version": "17.12.6b",
"status": "affected"
},
{
"version": "17.4.1c",
"status": "affected"
},
{
"version": "17.15.5a",
"status": "affected"
},
{
"version": "17.18.1y",
"status": "affected"
},
{
"version": "17.12.7a",
"status": "affected"
},
{
"version": "17.18.3",
"status": "affected"
},
{
"version": "17.12.7b",
"status": "affected"
},
{
"version": "17.18.3a",
"status": "affected"
},
{
"version": "26.1.1a",
"status": "affected"
},
{
"version": "26.2.1ea",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 4.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-05T17:35:57.539429Z",
"id": "CVE-2026-20311",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-126"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW",
"source": "[email protected]"
}
]
}